09/23/2004 THU 13:08 FAX 831 431 1704 Borland DTBU 



1 001/017 



PAGE1/17*RCVDA' 



SEP 2 3 2004 



Vladimir Patryshev 
277 Bsteban Way, 
San Jose, CA 95119 
(408) 226 1555 



United States Patent and Trademark Office 



Request for Interview 



Application No. : 09/682,576 

Request for Reconsideration of Office 
Action regarding application 
09/682,575 



Dated thia 20 day of September, 
2004 



277 Esteban Way, 
San Jose, CA 95119 
(408) 226 1555 
Vladimir Patryshev 



277 Esteban Way, 
San Jose, CA 95119 
(408) 226 1555 



9/23(2004 4:07:58 PM [Eastern Daylight Time] * SVR:USPT0€FXRF-1/1 * DNIS:8729306 * CSID:831 431 1 704 ■ DURATION (mm-ss):03-38 



09/23/2.004 THU 13:08 FAX 831 431 1704 Borland DTBU 



0002/017 



Hereby I request an interview with examiners regarding the office 
action on application number 09/682,586. 

My preferred dates for interview are; 

09/25, 09/30, 10/05, 10/07, 10/l2 r between 9AM and 12AM. 

Vladimir Patryshev 
September 20, 2004 
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San Jose, ca 95119 
(408) 226 1555 
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Action regarding application 
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Thank you for sending me the review of my patent application. 

Unfortunately, I have to request to reconsider Your Office Action 
regarding my application, since I disagree with the points in the 
rejection. The rejection mentions several publications: Tuukkanen, 
Berstis, and Horn. 

My main argument is that, while Janne Tuukkanen' s work relates to data 
encryption (not encoding) , Berstis' patent relates to url correction, 
and Horn's application relates to using various encodings to transfer 
and represent business data, my application relates to detecting of the 
encoding that the user chooses on their browser, and possible 
transferring of this information to the server. 

Below I will present some basic definitions regarding the topic of the 
invention, then my arguments, and, finally, a comparison table 
supporting my statements. 
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1. Definitions 

Character Encoding 

Definition A ( http://en. wikipedia,orei/wiki/Character encoding ) 

A character encoding is a code that pairs a set of natural language 
characters (such as an alphabet or svllabarv ) with a set of something 
else, such as numbers or electrical pulses. Common examples include 
Morse code , which encodes letters of the Latin alphabet as series of 
long and short depressions of a telegraph key ; and ASCII , which encodes 
letters, numerals, and other symbols as both integers and 7- bit binary 
versions of those integers . 

Definition B ( www. adobe . com/ type/ topics /glossary . html ) 

Character encoding is a table in a font or a computer operating system 
that maps character codes to glyphs in a font. Most operating systems 
today represent character codes with an 8 -bit unit of data known as a 
byte. Thus, character encoding tables today are restricted to at most 
256 character codes. Not all operating system manufacturers use the 
same character encoding. For example, the Macintosh platform uses the 



Request for Reconsideration - 3 



2 77 Esteban Way, 
San Jose, CA 95X19 
(408) 226 1555 



PAGE 5/17 * RCVD AT 9/23(2004 4:07:58 PM [Eastern Daylight Time] * SVR:USPT0£FXRF-1/1 * DNIS:8729306 1 CSID:831 431 1704* DURATION (mm-ss):03-38 



09/23/2004 THU 13:09 FAX 831 431 1704 Borland DTBU 



1006/017 



standard Macintosh character set as defined by Apple Computer, Inc, 
while the windows operating system uses another encoding entirely, as 
defined by Microsoft. Fortunately , standard Type 1 fonts contain all 
the glyphs needed for both these encodings, so they work correctly not 
only with these two systems, but others as well. Also see character, 
glyph, keyboard layout. 

Data Encryption 

Definition A ( www 3_t all ion .com/html/ support /glossary . html ) 

Prevents any non- authorized party from reading or changing data. The 
level of protection provided by encryption is determined by an 
encryption algorithm- In a brute-force attack, the strength is measured 
by the number of possible keys and the key size. For example, a Triple- 
Data Encryption Standard system (3 DES) uses 112 -bit or 168 -bit keys 
and. based on currently available processing power, is virtually immune 
to brute-force attacks . Business to Business VPNs (Extranets) share 
sensitive data with multiple organizations, so demand the highest level 
of security. This requires public key encryption and/or secure key 
exchange, both of which are designed to eliminate the risk of the key 
becoming known to an unauthorized party. 
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Definition B ( http : //en. wiki-gedia . orq/wiki /Encrypt ion ) 

Encryption is the process of obscuring information to make it 
unreadable without special knowledge- This is usually done for secrecy, 
and typically for confidential communications. Encryption can ensure a 
good measure of confidentiality (secrecy) , but may not be able to 
provide authentication . Even when encrypted, messages can be subject to 
traffic analysis . 

2 Discussion 

2.1. Jaaxma TuuJzJcanon , ^Simplo Script Security (SSS) vO. SSbeta", 
http: //projanna fc . port 5 * com 

This article discusses the idea and the implementation of data 
encryption via Javascript . The purpose of this is to ensure that data 
are transferred in obscured form over the network," while keeping things 
simple on the client side, and, since the implementation is in 
Javascript, it does not depend on the browser implementation, and can 
be used with virtually every browser, even on mobile devices (those of 
them that support Javascript) . The article has nothing to do with 
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international characters, character encoding, and text parsing or 
display. 

2.2. BBrstis , at al., U.S. patent 6,092,100 

This patent solves a problem of URL resolving when the URL may not be 
well-formed, or may be entered only partially. The patent offers a 
heuristics to use to suggest the user that is typing a URL in the 
address field in Navigation Toolbar of a browser. This technique is now 
ubiquitous: in many browsers, if you type an address, the browser opens 
a drop-down list with suggestions - based, probably, on this invention. 
This patent has nothing to do with the page content or the encoding 
used for representing characters of the page, or with client-server 
communication . 

2.3, Horn et aX, VPSTO publication 2003/0156689 Al 

This publication is dedicated to a global, i.e. multiligual, electronic 
commerce system, ofte data in the system may be in different alphabets, . 
thus belonging to different character sets, and, hence, represented in 
the system using various character encodings - 
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Most, if not all, databases now support various character sets; some of 
databases use their internal encoding for all the character sets 
supported, while others can be tuned to used a specific encoding for a 
specific language . 

Moat browsers also support a multiplicity of character setcs, and 
render pages in different encoding. The browser chooses the encoding 
based on *eharset' metatag in HTTP, on its proprietary algorithm of 
detecting the character set, and on the user's choice: ror instance, in 
Netscape/ via view- > character Coding, one may swich between different • 
encodings, and the browser will use that encoding while interpreting 
and rendering the contents of a web page or of a file. 

Horn et al. use in their publication these two features to store 
multilingual data in their database and to send them over to the 
client's browser, so that texts in many languages can be seen. Since 
the system they patent already knows which language and which encoding 
is used for a particular set or data, there is no need to try to detect 
the encoding that the user has currently chosen. The system assumes 
that the encoding is always what was specified when the data are sent 
Over from the server to the browser (which, as practice shows, is not 
always. true: the user can switch current encoding for some reason - and 
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then the data Bent back to the server will look ^corrupt" , since the 
server assumes the same encoding that it sent the data in) . The wrong 
encoding on the client side may be the result of the browser setting 
the encoding wrongly. This actually happens with some versions of 
Internet Explorer. 

2.4. My application, 09/682,576, does not deal with the data on the 
server side, and does not specify which encoding to use for which data, 
or whether to use it. It solves a specific problem of detecting, 
dynamically, the encoding that the browser currently has, whether set 
from the me ta information on the web page, from the browser's own guess, 
or manually by the user. The information obtained using my method can 
be a) used for manipulating data using scripting languages on the 
client side, and/ or sent back to the server, together with the text 
entered by the user, and to be later used to decode the user input 
properly. Unfortunately, so far none of the browsers, in their object 
model, provides this information directly. The application deals with 
this problem, and successfully resolves it. 

3. Regarding Claim Rejections 

3.1. Regarding claim 1 : 
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Berstis does not mention "encoding" anywhere in the patent text. 
Horn in [102] - [105] suggests to use Unicode for data encoding, and 
writes, in [105] # that some systems convert data from Unicode to 
client-requested encoding. 

My claim 1 does not recommend any specific encoding, but offers a 
method for detecting such encoding. Neither Berstis, nor Horn ever 
mentions encoding detection. 

Berstis' detection engine detects the possible candidate URLs, not the 
character encoding. Berstis' method is fuzzy, and eventually involves 
the user participation, and it cannot be applied to fully- automated 
encoding detection as described in my claim. 

More, Unicode cannot be used for Berstis' case, because Unicode is not 
used for encoding multilingual characters in URL strings. URL has its 
own specific standard for such characters. 

My claim also does not apply to converting between character sets. It 
is the function of the software on the server side to determine. 
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whether to convert the data, once the data are received and the 
character set is known, or keep it, together with the character set. 



Berstis' invention describes the behavior of the browser, and it cannot 
be applied to the scripts which in the majority of browsers, for the 
sake of security, cannot retrieve the information from address text 
input, and thus cannot access the URL the user types. Neither [180] nor 
[105] in Horn mention any scripting. In other places, Horn mentions 
JavaScript as a took that could be used for some purposes, together 
with other tools; in [0237] Jscript is mentioned as one of the existing 
scripting languages. [0293] again repeats the common knowledge that 
JavaScript and Jscript uses ASCII, but can contain non-ASCII Unicode 
characters in string literals and comments. 

3*3. Regarding claim 3 : 

Horn mentions Utf-8 and multi-byte encoding as one of the existing 
encodings. This is a common knowledge; the full list of encodings 

supported in the Internet can be found at 

t 

www. iana ■ org/assi anmence/charaecer-geta . My application is aware of 
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this multiplicity of encodings, and is dedicated to finding out which 
one is currently used. Claim 3 consists of detailing the method of 
encoding detection: start with Utf , then mult i -byte, then single-byte 
encodings . 

3.4. Regarding claim 4 : 

Horn does not teach 11 accompanying the form data sent from the web 
client" ; this is actually a quote from my claim 4. 

In [202] and [203) Horn repeats the common knowledge that form data are 
sent from the client to the server, and <PORM> tag is used for setting 
up the form in HTML . The statement in Horn [203] about "FORM request" 
is factually wrong , there is no FORM request in HTTP (see 
htto ://www.w3 .orq/ProtocoTs/ for reference) - Secure web pages do not 
relate to my claims . 

Since Bert sis does not claim any character set or character encoding 
detection, it is impossible to apply Bertsis' algorithm of URL string 
prediction for detecting encoding , even less for conversion. 

3.5- Regarding claim 5: 
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Again, "correct form data conversion on the server side . . collected" 
is a quote from ray claim 5. Horn just mentions that form data are sent 
from the browser to the server in HTTP requests, which is a common 
knowledge . 

Making secure web pages are not related to my invention. 
My claim is that the information collected using claims 1-4 can be then 
successfully used on the server to decode the bytes received from the 
client browser - 

Here is the problem, A server send a page with a form. The server has 
no clue which language the user is going to use, and, when the browser 
sends back the bytes that represent the characters the user typed, the 
server cannot find out how to map the bytes to Unicode. Unless the 
method of my invention is used - this method provides this kind of 
information. No other method does. 

But of course this invention assumes using HTTP for communication, HTML 
for data representation, <FORM> tag for writing forms in HTML, and 
JavaScript or some other scripting language for implementing the 
method. It relies on the browser's ability to represent text in the 
encoding chosen by the user, and resolves the problem that this 
information, which encoding is chosen, is, generally speaking, hidden 
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from the server and from the Object Model that a scripting language can 



use. 



4. Comparison Chart 



Please find the comparison chart on the next page. 
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